Your clients compete. Their data cannot mingle.
As a fractional GC, you're holding confidential information for multiple companies at the same time — sometimes direct competitors. Sapphire Legal is architected around real per-tenant isolation and a private AI, because that is what holding competing clients actually requires.
- Quick answer
- How does Sapphire Legal keep competing clients' data isolated?
- Sapphire Legal gives each client firm its own database, its own document storage, and a private legal AI that runs inside our own AWS account — never on OpenAI or a public chatbot. Each client's data lives in a different place from every other client, not in a shared database with a tenant ID column. The AI that drafts contracts and analyzes calls runs in an isolated, private environment: prompts and responses are never used to train AI models and are never retained by the AI provider. Privileged client call transcripts are locked behind an attorney review step that's recorded in an audit log. This is the only architecture that holds up when your clients are competitors.
Isolation is the foundation, not a feature.
Most multi-tenant software puts all clients in one database and relies on code to keep them apart. That's fine for a CRM. It's not fine when your clients compete with each other. Here's how Sapphire Legal is different.
Per-tenant database
Every client firm gets its own database — not a shared table with a tenant column, but a separate database entirely. Data cannot leak between clients because it doesn't live in the same place to begin with.
Per-tenant storage
Each client's documents are stored in an isolated location with encryption at rest. Optional dedicated storage buckets are available for clients whose compliance team wants physical separation.
Private legal AI in AWS
The AI that drafts your documents and analyzes your calls runs privately inside our own AWS account, in US regions — models we host ourselves alongside models served privately through AWS. It's not a public chatbot. Your client data is never used to train AI models and never retained by the AI provider.
Privileged calls stay privileged — and we can prove it.
Upload a client-call recording to Sapphire Clarity and it becomes searchable, structured legal intelligence. When the call is marked attorney-client privileged, the resulting transcript is locked behind an explicit review step. An attorney has to confirm they've reviewed the material before anyone else on the team can open it — and that review is logged with name, timestamp, and justification.
If privilege is ever challenged, you have a defensible audit trail showing exactly who accessed what and when.
- Attorney review required before transcript access
- Audit log with reviewer name + timestamp
- Privileged flag persists across exports
- Access can be revoked at any time
- Conflict check runs automatically on intake
Security questions, answered plainly.
Does Sapphire Legal train AI models on my client data?
No. The legal AI runs inside Sapphire Legal’s own AWS account rather than calling out to OpenAI, Anthropic or any other outside provider, so your prompts and documents never reach a third-party model. They are not used to train models, not retained by an AI vendor, and not pooled with any other customer’s data. Your material is used to answer your questions and nothing else.
Is my data shared with OpenAI, Anthropic or any other AI provider?
No. Nothing leaves Sapphire Legal’s AWS environment. The models that draft documents, analyze calls and answer questions execute inside that account, which is what makes it possible to say that client data is never routed to an external AI service. There is no third-party inference call in the path.
How is my firm’s data separated from other firms?
Every client firm gets its own PostgreSQL database and its own document storage — a physically separate database, not a shared table with a tenant identifier column. Data cannot leak between firms because it does not live in the same place to begin with. This is the distinction that matters when two clients of the same fractional GC are competitors.
Is Sapphire Legal confidential enough for privileged material?
Privileged client call transcripts sit behind an attorney review step, and that review is written to an audit log. Combined with per-tenant isolation and a private in-account AI, that means privileged material is never exposed to another tenant, never sent to an outside model, and every access to it is recorded. The audit trail is designed to be something you can show a client or a regulator.
Where does my data physically live?
In Sapphire Legal’s AWS infrastructure, in the region for your market. Each firm’s database and document storage are separate resources within it, so “where does my data live” has a specific answer per firm rather than a shared one. Current regional detail for your market is available on request during onboarding.
Who at Sapphire Legal can see my documents?
Access to customer data is restricted and logged. Routine product operation does not require anyone at Sapphire Legal to read your documents, and support access to a tenant is deliberate and recorded rather than ambient. Because each firm is a separate database, there is no internal view that spans customers by default.
What happens to my data if I cancel?
Your firm’s data remains yours. Export is available, and the retention and deletion handling for your tenant is set out in the Terms and the Privacy Policy rather than left to practice. Because your data is its own database, removing a tenant removes that data rather than filtering it out of a shared store.
Does the AI show where an answer came from?
Yes. Ask Sapphire answers only from your firm’s own records, and every statement carries a numbered source that opens the document, register or report it rests on. If the answer is not in your records, it says so rather than filling the gap. Actions it prepares — tasks, deadlines, drafts, filed email — are cards you approve, and each approval is audit-logged.
Need the technical deep-dive?
If your clients' security team wants the full architecture diagram — database isolation, token verification, audit logging, the whole thing — we have it ready. Book a demo and we'll send it over before the call.